Skip to content

fix: fail startup when Auth0 is not configured - #364

Merged
katyalmohit merged 2 commits into
mainfrom
fix-security-gaps
Aug 12, 2026
Merged

fix: fail startup when Auth0 is not configured#364
katyalmohit merged 2 commits into
mainfrom
fix-security-gaps

Conversation

@katyalmohit

@katyalmohit katyalmohit commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Pull Request

Description

  • Missing AUTH0_DOMAIN/AUTH0_AUDIENCE used to silently fall back to DummyBackend,
    authenticating everyone as dummy|123456 and leaving all v0 routes open. The app now refuses to start when ENVIRONMENT=production.
  • Other environments keep the existing dummy-auth fallback and warning.

Fixes #https://github.com/openclimatefix/client-private/issues/560

How Has This Been Tested?

Ran locally with ROUTERS=uk_national SOURCE=dummydb and the Auth0 vars unset

Checklist:

  • My code follows OCF's coding style guidelines
  • I have performed a self-review of my own code
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works
  • I have checked my code and corrected any misspellings

Comment thread src/quartz_api/cmd/main.py Outdated
@katyalmohit
katyalmohit merged commit 40b7484 into main Aug 12, 2026
6 checks passed
@katyalmohit
katyalmohit deleted the fix-security-gaps branch August 12, 2026 11:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants